goldfish
your data, your Mac

Privacy

Effective June 9, 2026 · Last updated June 9, 2026
The short version

Your privacy, in plain language

Goldfish is a private memory for your computer. It runs on your Mac, learns your work context, and helps you write in your own voice. Here's exactly how your data is handled, without the legal jargon.

Your memory stays on your Mac

The context Goldfish builds about your work is stored on your device, in an encrypted database. We don't keep a copy. We don't sync it, back it up, or upload it anywhere. There's no Goldfish cloud holding your history.

What Goldfish sees

Goldfish reads text from your screen using macOS Accessibility APIs. That's the text in the apps you're working in. No screenshots. No screen recording. Just text.

What leaves your Mac

Your memory doesn't leave your Mac on its own. The only time text leaves your device is when you actively ask Goldfish to do something, like draft a reply or answer a question. In that moment, Goldfish sends the context that request needs, encrypted, to the AI model that writes the response. It sends what the task needs, not your whole history.

AI processing

Requests go to GPT-5.5 on a private Azure OpenAI deployment with zero data retention, routed over an encrypted Cloudflare gateway. Microsoft processes the request to generate your response and does not store it or train on it afterward. Voice dictation runs through the same deployment — your speech is transcribed to text and the transcript is deleted immediately.

We don't sell or train on your data

We don't sell your data. We don't share it for anyone else to use. And nothing you do in Goldfish is used to train AI models, ours or the model provider's.

You're in control

  • Pause capture any time.
  • Exclude any app or domain from capture, in settings or by just telling Goldfish to blacklist it.
  • Delete your memory, in part or in full.
  • Revoke Accessibility permission in macOS System Settings, which stops Goldfish from reading any screen text at all.

That's the short version. The full Privacy Policy below has the complete detail.

The full policy

Goldfish Privacy Policy

Effective date: June 9, 2026  ·  Last updated: June 9, 2026

1.Introduction

This Privacy Policy describes how Goldfish AI Inc. ("Goldfish," "we," "us," or "our") collects, uses, stores, and protects information in connection with the Goldfish macOS application and related website (collectively, the "Service").

Goldfish is a local-first macOS assistant. It reads text from your screen using macOS Accessibility APIs, builds a memory of your work context on your device, and helps you write replies and understand that context in your own voice.

By downloading, installing, or using Goldfish, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Service. Our core principles are minimal data collection, user control, and keeping your data on your device by default.

2.How Goldfish Works

Goldfish reads text from the active application on your screen using macOS Accessibility APIs. It does not capture screenshots and does not record your screen. Only text is read.

The text Goldfish captures is stored locally on your Mac in an encrypted database. This local memory is not uploaded to or synced with our servers.

When you actively invoke Goldfish, for example to draft a reply, answer a question, or dictate, the context relevant to that request is transmitted to our AI model provider to generate a response. This is the only circumstance in which your captured text leaves your device.

3.Information We Collect

Local memory and captured context. Stored on your Mac and not transmitted to us for storage: text read from supported applications via macOS Accessibility APIs; the memory and context Goldfish builds to make its assistance relevant to you; and your preferences and settings, including any apps or domains you have excluded from capture. This data is held in an encrypted SQLite database on your device.

Data sent for processing (transient). When you make a request, we transmit the context relevant to that request, and for dictation your voice input, to our AI model provider to generate a response. This data is processed solely to fulfill your request and is not retained after the response is returned.

4.How We Use Information

We use the information described above to provide the Service (read screen context, build local memory, and generate replies and answers), to process your requests by sending relevant context to the AI model provider, and to comply with legal obligations as required.

We do not use your data for advertising or behavioral profiling, and we do not use your data to train AI models.

5.AI Processing and Sub-Processors

To generate responses and transcribe voice input, we use the following third-party services:

ProviderPurposeData shared
Microsoft (Azure OpenAI) GPT-5.5 model hosting for text generation and voice transcription Per-request context, and for dictation, voice input. Configured for zero data retention; Microsoft does not store this data after the response is returned and does not train on it.
Cloudflare Encrypted gateway for routing requests to the AI model provider Request data in transit only.

We do not sell your personal data, and we do not share your captured context with third parties for their own independent use. Requests are processed solely to fulfill them. Voice transcripts are deleted immediately after transcription and are not stored or used for training.

6.Data Storage and Retention

Your local memory and captured context remain on your device until you delete them or uninstall Goldfish; we do not hold a copy. Data sent for processing is handled transiently to fulfill your request and is not retained after the response is returned. Voice input is transcribed and the transcript deleted immediately.

7.Data Security

We take measures to protect your information, including storing your local memory in an encrypted database on your device, and encrypting all requests to the AI model provider in transit (TLS), routed through a Cloudflare gateway. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

8.Data Sharing and Disclosure

We do not sell your personal data. We share information only in limited circumstances: with the sub-processors described in Section 5, under agreements that limit their use of the data to providing services to us; where required by law, court order, or governmental authority, or to protect the rights, property, or safety of Goldfish, our users, or the public; and in connection with a merger, acquisition, or sale of assets, in which case information may be transferred as part of that transaction.

9.Your Rights and Choices

You can control Goldfish directly in the app: pause capture at any time; exclude apps or domains from capture, in settings or by instructing Goldfish directly; delete your local memory in part or in full; and revoke macOS Accessibility permission in System Settings, which disables Goldfish's ability to read screen text.

Depending on your jurisdiction, you may also have rights to access, correct, delete, port, restrict, or object to the processing of your personal data. Because your memory is stored locally on your device and under your control, you can exercise many of these directly in the app. To make a request regarding any other data, contact us using the details in Section 12.

If you are in the European Economic Area or the United Kingdom, you have rights under the GDPR, including the right to lodge a complaint with your local supervisory authority. If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of sale; we do not sell personal information.

10.Children

Goldfish is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

11.International Data Transfers

Your requests are processed by providers that may operate in countries other than your own. Where personal data is transferred internationally, we rely on appropriate safeguards.

12.Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at [email protected]. Goldfish AI Inc.

13.Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and notify you within the app or by other reasonable means.